CVE-2016-9398 The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
HighCVSS 7.5
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jasper project jasper | < 1.900.17 | 1.900.17 |
| fedoraproject fedora | = 32 | No fix listed |
| fedoraproject fedora | = 33 | No fix listed |
| openSUSE leap | = 15.1 | No fix listed |
| openSUSE leap | = 15.2 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| openSUSE leap | = 42.2 | No fix listed |
| SUSE linux enterprise desktop | = 12-sp1 | No fix listed |
| SUSE linux enterprise desktop | = 12-sp2 | No fix listed |
| SUSE linux enterprise server | = 12-sp1 | No fix listed |
| SUSE linux enterprise server | = 12-sp2 | No fix listed |
| SUSE linux enterprise software development kit | = 12-sp1 | No fix listed |
| SUSE linux enterprise software development kit | = 12-sp2 | No fix listed |
References
- SUSE-SU-2017:0084 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2017:0101 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2020:1517 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2020:1523 mailing-list third-party-advisory vendor-advisory
- [oss-security] 20161117 Re: jasper: multiple assertion failures mailing-list patch third-party-advisory vdb-entry
- 94382 third-party-advisory vdb-entry
- blogs.gentoo.org patch third-party-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- FEDORA-2021-0a6290f865 vendor-advisory
- FEDORA-2021-2b151590d9 vendor-advisory